TikTok · Report #1514554
XSS and iframe injection on tiktok ads portal using redirect params
Validstatus
mediumseverity
43upvotes
19 May 2022disclosed
Summary
A Cross-Site Scripting (XSS) vulnerability was found on a TikTok Ads endpoint via the "redirect" parameter. We thank @cancerz for reporting this to our team.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.